A config rule that checks whether AWS Secrets Manager secret has rotation enabled. The rule also checks an optional maximumAllowedRotationFrequency parameter. If the parameter is specified, the rotation frequency of the secret is compared with the maximum allowed frequency.

This config rule supports the following parameters:

  • maximumAllowedRotationFrequency
    • Required: No
    • Type: int
    • Description:Maximum allowed rotation frequency of the secret in days.
  • maximumAllowedRotationFrequencyInHours
    • Required: No
    • Type: int
    • Description:Maximum allowed rotation frequency of the secret in hours.

ConfigRule
AWS::Config::ConfigRule


Scope

ComplianceResourceTypes

Source *
CustomPolicyDetails
SourceDetails

CloudFormation Template

Share Template